Test ID:	1.3.6.1.4.1.25623.1.0.108365
Category:	Denial of Service
Title:	Elastic Kibana 'CVE-2017-11499' DoS Vulnerability - Linux
Summary:	Elastic Kibana is shipping a version of Node.js which is prone; to a denial of service (DoS) vulnerability.
Description:	Summary: Elastic Kibana is shipping a version of Node.js which is prone to a denial of service (DoS) vulnerability. Vulnerability Impact: This flaw could allow a remote attacker to consume resources within Node.js preventing Kibana from servicing requests. Affected Software/OS: Elastic Kibana versions prior to 4.6.5 and 5.x prior to 5.5.1. Solution: Administrators running Kibana in an environment with untrusted users should update to version 5.5.1 or 4.6.5. There is no workaround for this issue, the flaw can be triggered by an unauthenticated anonymous user. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-11499
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.